- <td>
- <table width="100%">
- <tr>
- <td align="left" width="30%"><b>Dateiname</b></td>
- <td align="left" width="70%"><b>Webdavlink</b></td>
- </tr>
- [%- FOREACH file = WEBDAV %]
- <tr>
- <td align="left">[% file.name %]</td>
- <td align="left"><a href="[% file.link %]">[% file.type %]</a></td>
- </tr>
- [%- END %]
- </table>
- </td>
+ <td align="left">[% HTML.escape(file.name) %]</td>
+ <td align="left"><a href="[% HTML.escape(file.link) %]">[% HTML.escape(file.type) %]</a></td>